Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Using an ISDN Router to dial in another router that requires RADIUS

Hi,

I am trying to use a Cisco 800 series ISDN router that I have at home to dial into the network at work. The router here is a Shiva that is configured to pass authentication to a Radius server.

How should I configure my router at home? I have not specified a ppp authentication method on my dialer interface but I am not sure where I should specify the username and password to send to the Shiva...

Any help would be greatly appreciated.

Thanks,

Stephane R. Bourdeaud

stephanebourdeaud@hotmail.com

2 REPLIES
Community Member

Re: Using an ISDN Router to dial in another router that requires

Stephane,

The good news is that the config for your local 800 is pretty straightforward. You don't have to add any AAA or radius commands to the 800, since only the Shiva talks directly to the radius server.

For this example, we will assume that your radius username is george, and the radius password is apple. On the 800, if you have a dialer interface, you would add these commands there. If you have no dialer interface in the config, then you would instead add these commands to the bri interface:

ppp authentication pap ms-chap chap

ppp chap hostname george

ppp chap password apple

ppp pap sent-username george password apple

That should do the trick. If you happen to have the username and password that the Shiva router will use to identify itself, then you should add this to the 800 config as well. In this example we will say the Shiva will identify itself with hostname/username jack and password jill. At global config in the 800, you would add:

username jack password jill

In order to avoid some really interesting authentication issues, you should add your own username and password in the same way, also at global config:

username george password apple

You may not need to enter either of those "username xxx password yyy" statements into the config for this to work; it depends on exactly how it is implemented. If you do not see a successful connection, on your 800 run the debug of "debug ppp authentication." This will tell you if you are failing authentication specifically.

Good luck!

Community Member

Re: Using an ISDN Router to dial in another router that requires

Stephane,

If you are using a dialer interface put the authentication method under it..i.e

interface dialer 1

encapsulation ppp

ppp authentication chap

hope this helps

124
Views
0
Helpful
2
Replies
CreatePlease to create content